CVE-2021-38617

HIGH 8.8CVE-2021-38617 · Published 07/09/2021 · updated 17/06/2026

In short

CVE-2021-38617 is a HIGH (CVSS 8.8) vulnerability affecting natural language processing (eigentech).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
natural language processing eigentech	`= 3.10.1`	No fix yet

Description

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation.

References

cds.thalesgroup.com/en/tcs-cert/CVE-2021-38617
eigentech.com · Vendor Advisory
excellium-services.com/cert-xlm-advisory · Third Party Advisory
excellium-services.com/cert-xlm-advisory/CVE-2021-38617 · Third Party Advisory

More vulnerabilities in natural language processing

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free